|


ISP Planet
Cache Review Series - NetApp NetCache
C720 |
Caching Web Objects
Setup enables basic NetCache HTTP proxy services; refinements are then
made using the "Configure Advanced Settings" section of the UI.
 |
The Transparency Settings page
(left) configures transparent proxy and IP spoofing for HTTP,
NNTP, and SSL, HTTPS, or any other tunneled protocol. Protocols enabled
here must also be added to the listening ports in Basic Settings.
IP spoofing is a great feature: it causes requests to carry client
IPs for better hit recording, but cannot be used if the return route
would not pass through the cache.Redirection protocols TPCP (Alteon
switches) and WCCP (Cisco routers) are also configured here. |
Create destination bypasses by enabling IP Forwarding, then adding bypassed
servers by IP or URL. Bypasses only apply to transparent mode; use PAC files
to bypass destinations in proxy mode. In fact, we had to enable transparency
for all protocols before we could successfully configure a server bypass.
| Use the Web Accelerator Settings
page (right) to configure reverse proxy services. Start by
specifying a "default" back-end server IP and port. To accelerate
other servers, multi-home the NetCache's outside interface(s) and
map them to back-end servers. The NetCache can also strip hostnames
from MIME headers when mapping requests to back-end servers. |
 |
Like forward and transparent proxies, reverse proxy requests can be permitted
or denied with ACLs. We found NetCache server acceleration more difficult
to configure than in other caching appliances.
 |
In addition to ACLs, requests
can also be blocked by SmartFilterŽ, a subscription service from Secure
Computing. We downloaded the free trial database to a PC, then
uploaded it to the NetCache using the Web Filtering Settings page
(left) . The SmartFilter database can also be downloaded directly
to the NetCache weekly. Policy configuration is simple: just enable
or disable two dozen categories. |
Our SmartFilter policies worked as configured, with one exception: the
NetCache prevented access to a multimedia site classified as Entertainment,
but blocking had not been enabled for that category.
|